IDP failed to authenticate request.

mcullen4 · ‎02-06-2020

A selection of users in Bogota, Colombia are getting:
IDP failed to authenticate request. Status code="Responder" Check splunkd.log for more information about the failure.

Multiple users here in Raleigh, NC can access the logs fine.

I have read several articles indicating this is an SSO issue
But we are not doing SSO with Splunk

I do not know how to look at this splunkd.log either

nickhills · ‎02-06-2020

Open a ticket - its likely an issue on Splunks side

If my comment helps, please give it a thumbs up!

nickhills · ‎02-06-2020

Is this Splunk Cloud?

If my comment helps, please give it a thumbs up!

mcullen4 · ‎02-06-2020

Yes, this is spunk Cloud

rajasekhar14 · ‎02-06-2020

what is your authentication method?

IDP failed to authenticate request.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Quick connection discovery mode for forwarders

Join the Conversation

IDP failed to authenticate request.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Quick connection discovery mode for forwarders